Merge pull request #4 from obot-platform/dont-send-token

StrongMonkey · web-flow · commit 4b97535cbeae · 2025-07-18T14:55:31.000-07:00
Fix: don't send bearer token to downstream
diff --git a/main.go b/main.go
@@ -1134,6 +1134,8 @@ func (p *OAuthProxy) mcpProxyHandler(c *gin.Context) {
 					for _, value := range values {
 						req.Header.Add(key, value)
 					}
+				} else {
+					req.Header.Del(key)
 				}
 			}
 		},

Original file line number	Diff line number	Diff line change
`@@ -1134,6 +1134,8 @@ func (p OAuthProxy) mcpProxyHandler(c gin.Context) {`
`1134`	`1134`	`for _, value := range values {`
`1135`	`1135`	`req.Header.Add(key, value)`
`1136`	`1136`	`}`
	`1137`	`+ } else {`
	`1138`	`+ req.Header.Del(key)`
`1137`	`1139`	`}`
`1138`	`1140`	`}`
`1139`	`1141`	`},`